thodg/libgit2/appveyor.yml

• Show log

  Commit

• Hash : 1cc6cc99
  Author :
  Date : 2018-03-29T13:35:27
  

  appveyor: disable DHE to avoid spurious failures Our CI builds have intermittent failures in our online tests, e.g. with the message "A provided buffer was too small". This is not a programming error in libgit2 but rather an error in the SChannel component of Windows. Under certain circumstances involving Diffie-Hellman key exchange, SChannel is unable to correctly handle input from the server. This bug has already been fixed in recent patches for Windows 10 and Windows Server 2016, but they are not yet available for AppVeyor. Manually pamper over that issue by disabling all ciphersuites using DHE via the registry. While this disables more ciphers than necessary, we really don't care for that at all but just want to avoid build failures due to that bug. See [1], [2] or [3] for additional information. 1: https://github.com/aws/aws-sdk-cpp/issues/671 2: https://github.com/dotnet/corefx/issues/7812 3: https://support.microsoft.com/en-us/help/2992611/ms14-066-vulnerability-in-schannel-could-allow-remote-code-execution-n

Download

• appveyor.yml

• version: '{build}'
  branches:
    only:
    - master
    - appveyor
    - /^maint.*/
  environment:
    GITTEST_INVASIVE_FS_STRUCTURE: 1
    GITTEST_INVASIVE_FS_SIZE: 1
  
    matrix:
    - APPVEYOR_BUILD_WORKER_IMAGE: Visual Studio 2013
      GENERATOR: "Visual Studio 10 2010"
      ARCH: 32
    - APPVEYOR_BUILD_WORKER_IMAGE: Visual Studio 2013
      GENERATOR: "Visual Studio 10 2010 Win64"
      ARCH: 64
    - APPVEYOR_BUILD_WORKER_IMAGE: Visual Studio 2015
      GENERATOR: "Visual Studio 14 2015"
      ARCH: 32
    - APPVEYOR_BUILD_WORKER_IMAGE: Visual Studio 2015
      GENERATOR: "Visual Studio 14 2015 Win64"
      ARCH: 64
    - APPVEYOR_BUILD_WORKER_IMAGE: Visual Studio 2015
      GENERATOR: "MSYS Makefiles"
      ARCH: i686 # this is for 32-bit MinGW-w64
    - APPVEYOR_BUILD_WORKER_IMAGE: Visual Studio 2015
      GENERATOR: "MSYS Makefiles"
      ARCH: 64
  cache:
  - i686-4.9.2-release-win32-sjlj-rt_v3-rev1.7z
  - x86_64-4.9.2-release-win32-seh-rt_v3-rev1.7z
  
  build_script:
  - ps: |
      mkdir build
      cd build
      if ($env:GENERATOR -ne "MSYS Makefiles") {
        cmake -D ENABLE_TRACE=ON -D BUILD_CLAR=ON -D BUILD_EXAMPLES=ON -D MSVC_CRTDBG=ON .. -G"$env:GENERATOR"
        cmake --build . --config Debug
      }
  - cmd: |
      if "%GENERATOR%"=="MSYS Makefiles" (C:\MinGW\msys\1.0\bin\sh --login /c/projects/libgit2/script/appveyor-mingw.sh)
  test_script:
  - ps: |
      # Disable DHE key exchange to fix intermittent build failures ("A buffer
      # provided was too small") due to SChannel bug. See e.g.
      # - https://github.com/aws/aws-sdk-cpp/issues/671
      # - https://github.com/dotnet/corefx/issues/7812
      New-Item HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\KeyExchangeAlgorithm\Diffie-Hellman -Force | New-ItemProperty -Name Enabled -Value 0 -Force
      $ErrorActionPreference="Stop"
      Start-FileDownload https://github.com/ethomson/poxyproxy/releases/download/v0.1.0/poxyproxy-0.1.0.jar -FileName poxyproxy.jar
      # Run this early so we know it's ready by the time we need it
      $proxyJob = Start-Job { java -jar $Env:APPVEYOR_BUILD_FOLDER\build\poxyproxy.jar -d --port 8080 --credentials foo:bar }
      ctest -V -R libgit2_clar
      Receive-Job -Job $proxyJob
      $env:GITTEST_REMOTE_PROXY_URL = "localhost:8080"
      $env:GITTEST_REMOTE_PROXY_USER = "foo"
      $env:GITTEST_REMOTE_PROXY_PASS = "bar"
      ctest -V -R libgit2_clar-proxy_credentials
  

Download